Certificate Authorities

A Certificate Authority (CA) is a trusted entity that stores, signs, and issues digital TLS/SSL certificates. Certificates verify the ownership of a public key by the named subject of the certificate.

Download a CSV of approved certificate authorities: Certificate Authorities (ver. 10-MAR-2025)

See the best practices or learn more about the TLS/SSL Certificates and TLS/SSL Configurations risk vectors.

Identifying Certificate Authorities

Refer to the certificate issuer field (issuer_name) to identify the CA. The CA details are made up of the following attribute assertion values:

• C = 2-letter ISO Country Code
• ST = State/Province
• L = Locality
• O = Organization Name
• OU = Country or Region
• CN = Common Name